https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:44:11.896223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-33977 CVE-2022-33977 2026-10-18T06:44:11.897805+00:00

Affected: Christian Stefanescu untangle

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

 https://cve.radiocsirt.org/vuln/ghsa-7xr3-6ggc-wc9p GHSA-7xr3-6ggc-wc9p — untangle vulnerable to XML Entity Expansion 2026-10-18T06:44:11.897854+00:00

Affected: PyPI: untangle

### Impact An attacker may be able to cause a denial-of-service (DoS) condition on the server on which the product is running. This affects untangle versions up to and including 1.2.0

### Patches The problem has been fixed with version 1.2.1

### Workarounds None

### References https://jvn.jp/en/jp/JVN30454777/

### For more information If you have any questions or comments about this advisory: * Open an [issue](https://github.com/stchris/untangle/issues)